ClawHub
Back to skill

Security audit

Intelligence Suite

Security checks across malware telemetry and agentic risk

Overview

This skill is a transparent public news-monitoring tool, with some dependency and output-quality cautions but no evidence of hidden data access, persistence, exfiltration, or destructive behavior.

Install only if you are comfortable with a Node-based tool fetching public news pages and their linked articles. Treat scraped snippets as untrusted web text, review dependency versions before installing, and be aware that the global monitor includes one hardcoded placeholder entertainment item that should not be treated as real news.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Unpinned Dependencies

Low
Category
Supply Chain
Content
"test": "echo \"Error: no test specified\" && exit 1"
  },
  "dependencies": {
    "axios": "^1.6.0",
    "cheerio": "^1.0.0-rc.12",
    "rss-parser": "^3.13.0"
  },
Confidence
92% confidence
Finding
The dependency version for axios uses a caret range, which allows automatic installation of newer minor/patch releases instead of a single immutable version. This weakens supply-chain control and reproducibility, and in this case is more concerning because the referenced base version is also flagged separately as vulnerable.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"dependencies": {
    "axios": "^1.6.0",
    "cheerio": "^1.0.0-rc.12",
    "rss-parser": "^3.13.0"
  },
  "keywords": ["intelligence", "news", "ai", "makima"],
  "author": "Makima",
Confidence
90% confidence
Finding
The rss-parser dependency is specified with a caret range, so installs may resolve to different versions over time. While not inherently exploitable by itself, this is a real supply-chain hygiene weakness because it increases exposure to unexpected upstream changes or compromised releases.

Known Vulnerable Dependency: axios==1.6.0 — 10 advisory(ies): CVE-2026-44494 (axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `co); CVE-2026-44495 (axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollut); CVE-2025-62718 (Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF) +7 more

High
Category
Supply Chain
Confidence
98% confidence
Finding
The package declares axios 1.6.0, which is identified by the scanner as having multiple known security advisories, including SSRF-related and prototype-pollution-related issues. In a skill described as performing real-time AI and global news monitoring, HTTP client behavior is central functionality, so a vulnerable network library is especially relevant and can increase risk when fetching remote content or handling redirects, proxy settings, and untrusted responses.

VirusTotal

61/61 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.